<ul><li>U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection flaw to its Known Exploited Vulnerabilities catalog.</li><li>A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.</li><li>CISA orders federal agencies to fix this vulnerability by December 27, 2024.</li><li>Experts recommend private organizations review the Catalog and address the vulnerabilities in their infrastructure.</li></ul>

U.S. CISA adds BeyondTrust software flaw to its Known Exploited Vulnerabilities catalog

Discover more